validate extra apt sources

Extra APT sources need to be validated somehow. It's tricky to add an exact format that needs to be matched, but we can do something basic like:

• the first word needs to be either "deb" or "deb-src"
• the seconds word needs to be an URL or options inside brackets ([...])
• if the second word is options inside brackets ([...]), then the third needs to be an URL.